inhousefyi
← Back to listings

Application Security Engineer / Penetration tester

Growe TalentsRemote · Posted 16 days ago
Full-timeRemote
Apply now

Description

Our client, Growe, is a leading business advisory and services group in iGaming and Entertainment. Сreators of strategies that work and solutions that scale. Combining strategic vision with hands-on expertise, Growe helps businesses navigate the fast-evolving industry, seize new opportunities, enter new markets, and achieve sustainable growth.
Perfect for those who aim to:
  • Triage, validate, and prioritize security findings from SAST, SCA, and Secret scanning tools, filter out false positives, assess risks, and track issues through to remediation;

  • Conduct manual and tool-assisted code reviews to identify security vulnerabilities, logic flaws, and insecure implementation choices before code reaches production;

  • Perform hands-on penetration testing of web applications, microservices, and APIs to uncover security vulnerabilities and business logic flaws;

  • Audit REST and GraphQL APIs and web applications with a strong focus on core application security risks, authentication, authorization, and business logic.

Experience you’ll need to bring:
  • 3 years of experience in Application Security, Product Security, or Penetration Testing;

  • Hands-on experience triaging and analyzing findings from Semgrep / OpenGrep, Gitleaks, Trivy, and OSV-Scanner;

  • Experience with Burp Suite (Pro), Nuclei, Subfinder, SQLmap, Metasploit, and NetExec;

  • Deep understanding of classic OWASP Top 10 vulnerabilities, including Injection flaws (SQLi, Command Injection), Server-Side Request Forgery (SSRF), Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF), Broken Access Control / Insecure Direct Object References (IDOR / BOLA), Security Misconfigurations, Cryptographic Failures, Insecure Deserialization, and Mass Assignment;

  • Solid knowledge of OWASP API Security Top 10 for REST and GraphQL architectures;

  • Deep understanding of identity protocols and access control mechanics (OAuth 2.0, OIDC, JWT, SAML, RBAC/ABAC);

  • Ability to identify complex authorization bypasses, session management flaws, and business logic bugs;

  • Ability to read and analyze modern application code to spot security flaws (will be a plus);

  • Basic understanding of cloud security principles in AWS environments and Kubernetes (K8s) security fundamentals (will be a plus);

  • Intermediate level of English (spoken and written).

It's a perfect match if you have those personal features:
  • Strong communication skills to effectively collaborate with engineering, product, and DevOps teams;

  • Result-oriented mindset;

  • Openness to learning.

Our clients offer competitive benefits to support your professional and personal growth, including:
  • Health & Wellness Focus;

  • Global Medical Coverage;

  • Growth Opportunities;

  • Benefits Programs (compensation for the gym/stomatology/psychological service & etc.);

  • Performance-Driven Rewards;

  • Dynamic Work Environment.

Apply, and let your growth journey begin.

Similar jobs

Our client, Growe, is a leading business advisory and services group in iGaming and Entertainment. Сreators of strategies that work and solutions that scale. Combining strategic vision with hands-on expertise, Growe help…

Full-timeRemote

Est. 124,000 USD

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security po…

Full-timeRemote
JustMarketsRemote

Est. 120,000 EUR

We are looking for a DevSecOps and Application Security Lead to join our team and build our application security from scratch. In this role, you will lead the security direction within our department, focusing on integra…

Full-timeRemote

Est. 124,000 USD

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security po…

Full-timeRemote

Est. 80,000 EUR

Our client, Growe, is a leading business advisory and services group in iGaming and Entertainment. Сreators of strategies that work and solutions that scale. Combining strategic vision with hands-on expertise, Growe help…

Full-timeRemote

Est. 60,000 EUR

Our client, Growe, is a leading business advisory and services group in iGaming and Entertainment. Сreators of strategies that work and solutions that scale. Combining strategic vision with hands-on expertise, Growe help…

Full-timeRemote

Est. 140,000 USD

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security po…

Full-timeRemote

Our client, Growe, is a leading business advisory and services group in iGaming and Entertainment. Сreators of strategies that work and solutions that scale. Combining strategic vision with hands-on expertise, Growe help…

Full-timeRemote

Our client, Growe, is a leading business advisory and services group in iGaming and Entertainment. Сreators of strategies that work and solutions that scale. Combining strategic vision with hands-on expertise, Growe help…

Full-timeRemote
JustMarketsRemote

Est. 80,000 EUR

We are looking for an Endpoint Security Engineer to join our Security team. In this role, you will be responsible for implementing, operating, and improving endpoint security controls across corporate workstations, produ…

Full-timeRemote

Est. 152,500 USD

At Beyond Finance, we've made it our mission to help everyday Americans escape the endless cycle of crippling debt and step into a brighter financial future. Through compassionate, individualized care, a culture focused…

Full-timeRemote
JustMarketsRemote

Est. 120,000 EUR

We are inviting you, a highly motivated and results-oriented Enterprise & Cloud Security Manager to join our team on a full-time basis. Our team has unique expertise in research, analysis, and product development. By…

Full-timeRemote
OpenFXBangalore, India

About Us OpenFX is on a mission to move money as freely as data, unrestricted by time zones, banking hours, or legacy systems. We are building the infrastructure that will power the next generation of cross-border paymen…

Full-time

Est. 60,000 EUR

Our client, Growe, is a leading business advisory and services group in iGaming and Entertainment. Сreators of strategies that work and solutions that scale. Combining strategic vision with hands-on expertise, Growe help…

Full-timeRemote
AppsFlyerHerzliya, Israel

AppsFlyer’s Security team is looking for a highly skilled and security-savvy Application Security Engineer to lead our product and application security efforts. In this role, you will drive security design, ensure secure…

Full-time
Trade RepublicBerlin, Germany

Est. 120,000 EUR

Please note that this position is based in Berlin or London. THE BEST WORK OF YOUR CAREER Trade Republic is the largest savings platform in Europe - we operate in 17 countries, serving +8 million customers who trusted us…

Full-time
DevRevBangalore, India

About DevRev At DevRev, we're building the future of work with Computer – your AI teammate. Unlike traditional tools, Computer unifies all your data sources, tools, and workflows into a single AI-ready platform, giving e…

Full-time
TripadvisorRemote

Est. 120,000 PLN

About Tripadvisor The Tripadvisor Group connects people to experiences worth sharing, and aims to be the world’s most trusted source for travel and experiences. We leverage our brands, technology, and capabilities to con…

Full-timeRemote
CisionRemote

Est. 80,000 EUR

At Cision, we believe in empowering every individual to make an impact. Here, your voice is heard, your ideas are valued, and your unique perspective fuels our collective success. As part of our global team, you'll thriv…

Full-timeRemote
JustMarketsRemote

Est. 120,000 EUR

We are looking for a Cyber Defense Manager to lead, mature, and operate our resilient security operations capability. In this role, you will own the defense of our environment, ensuring fast and precise threat detection,…

Full-timeRemote
Transmit SecurityTel Aviv-Yafo, Gush Dan, Israel

We offer the industry’s only platform that fuses customer identity and anti-fraud solutions – customer identity management, identity verification, and fraud prevention. We sell to industries with large, consumer-facing b…

Full-time

Our client, Growe, is a leading business advisory and services group in iGaming and Entertainment. Сreators of strategies that work and solutions that scale. Combining strategic vision with hands-on expertise, Growe help…

Full-timeRemote
iCapitalLisbon, Portugal

Est. 80,000 EUR

About the role: We are looking for a technically strong Senior Application Security practitioner ready to take on real ownership. You will work directly with the Head of AppSec, contributing to the Secure Design practice…

Full-time
Security Engineer5 months ago
PayhawkSofia, Bulgaria

Company Mission Payhawk is a leading global spend management solution for scaling businesses. Headquartered in London and combining company cards, reimbursable expenses and accounts payable into a single product; its fut…

Full-time
CloudSEKBengaluru, Karnataka, India

WHO ARE WE? We are a bunch of super enthusiastic, passionate, and highly driven people, working to achieve a common goal! We believe that work and the workplace should be joyful and always buzzing with energy! CloudSEK,…

Full-time
Sporty GroupRemote

About the role Mission Strengthen Sporty’s offensive security posture by proactively testing and identifying vulnerabilities across our external perimeter, standalone virtual private servers (VPS), physical office infras…

Full-timeRemote
Trade RepublicBerlin, Germany

Est. 95,000 EUR

Please note that this position is based in Berlin, Germany. BEST WORK OF YOUR CAREER Trade Republic is the largest savings platform in Europe - we operate in 18 countries, serving +10 million customers who trusted us wit…

Full-time

Est. 55,000 EUR

Our client, Growe, is a leading business advisory and services group in iGaming and Entertainment. Сreators of strategies that work and solutions that scale. Combining strategic vision with hands-on expertise, Growe help…

Full-timeRemote
GuidePoint SecurityDenver, Colorado, United States

Est. 155,000 USD

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security po…

Full-time
Financial TimesLondon, United Kingdom

Est. 80,000 GBP

About Us The Financial Times is one of the world’s leading news organisations, globally recognised for its authority, integrity and accuracy, with a mission to deliver quality information and services worldwide. At the F…

Full-time